marketingguatemala.com
Issued by R3
About this certificate
This digital certificate with serial number 03:78:a5:5c:57:4f:46:cf:8c:89:69:d9:20:22:7f:ba:c2:ff was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=marketingguatemala.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:78:a5:5c:57:4f:46:cf:8c:89:69:d9:20:22:7f:ba:c2:ffSerial Number (int): 302390543907259427096968107008994460746495
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 36:73:17:f2:ce:76:8e:80:06:5f:88:56:df:86:5b:8e:c6:8f:1d:5d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 4f:05:b2:06:1e:e3:1c:c1:73:ba:d3:5e:d8:96:b5:a7:c3:5d:77:e9
Fingerprint (sha256): 6a:10:b3:68:db:ee:10:0e:c8:33:27:80:ec:29:af:0b:f0:93:3b:98:a2:f6:24:26:f2:78:55:86:6d:12:f1:ad
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate marketingguatemala.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for marketingguatemala.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
istlm.com
marketingguatemala.com
scpatriots.info
thenewbeer.com
marketingguatemala.com
scpatriots.info
thenewbeer.com
Other certificates including the domain name marketingguatemala.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for marketingguatemala.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISA3ilXFdPRs+MiWnZICJ/usL/MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMjcxMDI2NTFaFw0yNDA0MjYxMDI2NTBaMCExHzAdBgNVBAMT Fm1hcmtldGluZ2d1YXRlbWFsYS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQC2O/XrWhtxckVVCOyqCkGhEa18jyAB0J+MWm1IusWdVPsSKrkl3Hm6 MvzzPW5PexstnNwIFhLftuOmlGs2aurlVqh1c127JJgI6+Enl0jksmjHefWPh2Wk YABbkUtuw7KRdCRsCleC3NT65DiD6VZNl/HyZcma4eQOnVo+6ZgGbM5iU5peCvrx ccZlmCVBEoIlX5kNq4ywGL2l+EqNYBnCVfLeGeLnsv3nHO6d7FjprzafQecbTInP Vj+asbiCE5jKyyhgn7bq1fPydm6fDmTk5m3e1nYBwBT8bZBcPP1eFZ22K1Cpn09r oqiKMRe4Ao0J1+qALOVqtWvbC4c0x7E3AgMBAAGjggJDMIICPzAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC MAAwHQYDVR0OBBYEFDZzF/LOdo6ABl+IVt+GW47Gjx1dMB8GA1UdIwQYMBaAFBQu sxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYV aHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5s ZW5jci5vcmcvME0GA1UdEQRGMESCCWlzdGxtLmNvbYIWbWFya2V0aW5nZ3VhdGVt YWxhLmNvbYIPc2NwYXRyaW90cy5pbmZvgg50aGVuZXdiZWVyLmNvbTATBgNVHSAE DDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AKLiv9Ye3i8v B6DWTm03p9xlQ7DGtS6i2reK+Jpt9RfYAAABjUqsITsAAAQDAEcwRQIhAOx+EXiQ R8YtEI75/emyGNKJRsdIH5wcdzoQb1l89DZqAiArLyNFjlAl5tIQnm6g+NU49Ywg JztPEMSLZ4asWNxJWgB1AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0 AAABjUqsIXsAAAQDAEYwRAIgVBLZXOrS88jDHKh1AIHNrxLgrz6AhnFYLRdSGOuU DdoCIFCJFtnZq79PlnP/KvgOlwpT/yspdJ6xhDRgV/fF9N1JMA0GCSqGSIb3DQEB CwUAA4IBAQAbolXGVJz6c7ugIX+Z33Pp7+2hBrDDtpVnj5aZ+YLAdzDfOs0gyb2t jl8UPgLBausgRo5xIPaIkBQKTbAhSu+87xNM9x3jK6JFmosVpU5n8lKPMllV7doE tad11c92NMHtfCw1+UqH7vSnZPA6KZGYljTV0UCKuwixPNU4ZbYPtzGoNFzUmnd6 Ux6AeyDxkCctvTFQiTruS4wlrTizTDNWUbh8ZlDe5HUylrMxgOZnwCVyAqpT5J3R leaM5ntNyeo63E11L8hFtME6yuAnI3+EoTky2T5ZIYjU1s+9gqmudqSEuFg0Z9ya ro+2JR0vsXBGx8d7R5rliAtUgamZ+DPM -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjv161obcXJFVQjsqgpB oRGtfI8gAdCfjFptSLrFnVT7Eiq5Jdx5ujL88z1uT3sbLZzcCBYS37bjppRrNmrq 5VaodXNduySYCOvhJ5dI5LJox3n1j4dlpGAAW5FLbsOykXQkbApXgtzU+uQ4g+lW TZfx8mXJmuHkDp1aPumYBmzOYlOaXgr68XHGZZglQRKCJV+ZDauMsBi9pfhKjWAZ wlXy3hni57L95xzunexY6a82n0HnG0yJz1Y/mrG4ghOYyssoYJ+26tXz8nZunw5k 5OZt3tZ2AcAU/G2QXDz9XhWdtitQqZ9Pa6KoijEXuAKNCdfqgCzlarVr2wuHNMex NwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 302390543907259427096968107008994460746495 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-27 10:26:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-26 10:26:50 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'marketingguatemala.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23004939188748686534749927416561604595894939134511890177925348374448172953319720495792779735423293398924719490022883442052272085819089824823903515747124329383846263889037582983958267115111014912971011812325319052168944442300786548472986934566275143845049454966750121319476002099131175408967522160479812238966484125463120805532783588120997248248435690093120744795547616755360812808211849865090569381689629975441329826352521120278437486605319041852095262053970750370377627245422573138075909756352353084830522916905256149428575448150015013275446457868160812098783364953260672405903476820561970763233743850162596654592311 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 367317f2ce768e80065f8856df865b8ec68f1d5d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istlm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketingguatemala.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scpatriots.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thenewbeer.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d4aac213b0000040300473045022100ec7e11789047c62d108ef9fde9b218d28946c7481f9c1c773a106f597cf4366a02202b2f23458e5025e6d2109e6ea0f8d538f58c20273b4f10c48b6786ac58dc495a00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d4aac217b000004030046304402205412d95cead2f3c8c31ca8750081cdaf12e0af3e808671582d175218eb940dda0220508916d9d9abbf4f9673ff2af80e970a53ff2b29749eb184346057f7c5f4dd49 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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